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1 . A device comprising: 

a first memory storing a list of one or more ports; 

a second memory storing a list of one or more active sessions, each of said one or 
more active sessions identifying a port, a user identified on said port; 

a verifier commimicating with said first memory and said second memory, said 
verifier periodically checking a session in said list of one or more sessions, said verifier 
searching for said user in said list of one or more ports if said session is inactive, said 
verifier updating said session if said user is identified on an other port. 

2. The device according to claim 1 wherein said verifier further deactivates said 
session if said user is not identified on any port. 

3. The device according to claim 1 wherein said verifier further activates an 
adjustable timer when the user is not identified on said port, and deactivates the active 
session for the user if the user is not identified on any port at the expiration of said 
adjustable timer. 

4. The device according to claim 1 wherein said verifier identifies said user on any 
port with a Media Access Control address. 



22 



EL839722757US Docket No. CISCO-5020 

5. The device according to claim 1 wherein said verifier updates by associating the 
active session with the port on which user is identified. 



6. The device according to claim 1 wherein said verifier searching and updating 
depends on the status of a port hopping setting, said searching and said updating allowed 
when said port hopping setting is enabled, said searching and said updating disallowed 
when said port hopping setting is disabled, 

7. The device according to claim 1 wherein the active session of the user at said 
other port retains a policy setting of the user at said port. 

8. The device according to claim 1 wherein said verifier searching further comprises 
searching for said user on one or more network connectivity devices having one or more 
ports. 

9. A method for maintaining an active session for a user changing ports, the method 
comprising: 

periodically checking the active session for the user, the active session associated 
with a port, the user identified on said port; 

searching for the user on other ports if the user is not identified on said port; and 
updating the active session for the user if the user is identified on an other port. 

10. The method according to claim 9 further comprising: 
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deactivating the active session for the user if the user is not identified on any port. 



1 1 . The method according to claim 9 further comprising: 

activating an adjustable timer when the user is not identified on said port; and 
deactivating the active session for the user if the user is not identified on any port 
at the expiration of said adjustable timer. 

12. The method according to claim 9 wherein the user is identified on any port with a 
Media Access Control address. 

1 3 . The method according to claim 9 wherein said updating fijrther comprises 
associating the active session with the port on which the user is found. 

14. The method according to claim 9 wherein said searching and said updating 
depend on the status of a port hopping setting, said searching and said updating allowed 
when said port hopping setting is enabled, said searching and said updating disallowed 
when said port hopping setting is disabled. 

15. The method according to claim 9 wherein the active session of the user at said 
other port retains a policy setting of the user at said port. 
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16. The method according to claim 9 wherein said searching further comprises 
searching for the user on one or more network connectivity devices having one or more 
ports. 

17. A device for maintaining an active session for a user changing ports, the device 
comprising: 

means for periodically checking the active session for the user, the active session 
associated with a port, the user identified on said port; 

means for searching for the user on other ports if the user is not identified on said 
port; and 

means for updating the active session for the user if the user is identified on an 
other port. 

1 8. The device according to claim 1 7 fiirther comprising: 

means for deactivating the active session for the user if the user is not identified 
on any port. 

1 9. The device according to claim 1 7 fiuther comprising: 

means for activating an adjustable timer when the user is not identified on said 
port; and 

means for deactivating the active session for the user if the user is not identified 
on any port at the expiration of said adjustable timer. 
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20. The device according to claim 17 wherein the user is identified on any port with a 
Media Access Control address. 



2 1 . The device according to claim 1 7 wherein said means for updating further 
comprises means for associating the active session with the port on which the user is 
found. 

22. The device according to claim 17 wherein said means for searching and said 
means for updating depend on the status of a port hopping setting, said means for 
searching and said means for updating allowed when said port hopping setting is enabled, 
said means for searching and said means for updating disallowed when said port hopping 
setting is disabled. 

23. The device according to claim 17 wherein the active session of the user at said 
other port retains a policy setting of the user at said port. 

24. The device according to claim 17 wherein said means for searching further 
comprises means for searching for the user on one or more network connectivity devices 
having one or more ports. 
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25. A program storage device readable by a machine, tangibly embodying a program 
of instructions readable by the machine to perform a method for maintaining an active 
session for a user changing ports, the method comprising: 

periodically checking the active session for the user, the active session associated 
with a port, the user identified on said port; 

searching for the user on other ports if the user is not identified on said port; and 
updating the active session for the user if the user is identified on an other port. 

26. The program storage device according to claim 25 further comprising: 
deactivating the active session for the user if the user is not identified on any port. 

27. The program storage device according to claim 25 further comprising: 
activating an adjustable timer when the user is not identified on said port; and 
deactivating the active session for the user if the user is not identified on any port 

at the expiration of said adjustable timer. 

28. The program storage device according to claim 25 wherein the user is identified 
on any port with a Media Access Control address. 

29. The program storage device according to claim 25 wherein said updatmg further 
comprises associating the active session with the port on which the user is found. 
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30. The program storage device according to claim 25 wherein said searching and 
said updating depend on the status of a port hopping setting, said searching and said 
updating allowed when said port hoppmg setting is enabled, said searchuig and said 
updating disallowed when said port hopping setting is disabled, 

3 1 . The program storage device according to claim 25 wherein the active session of 
the user at said other port retains a policy setting of the user at said port. 

32. The program storage device accordmg to claim 25 wherein said searching further 
comprises searching for the user on one or more network connectivity devices having one 
or more ports. 
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